HackingHealthcareHealthcareCustomer Data InvolvedData ExfiltratedPIIIdentity (basic)Government IDMediumContained

Survival Flight Inc

bd_8fd906f0a103e6f9 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 17, 2025

Filed

Mar 6, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for Survival Flight Inc →2 incidents on file

Survival Flight, Inc. notified Nebraska AG of a security incident detected on July 17, 2025, where an unauthorized third party accessed patient files. Affected data includes names, SSNs, and DOBs. The company engaged forensic specialists, locked down systems, reported to law enforcement, and enhanced network security. Credit monitoring services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

Incident timeline

Jul 17, 2025

Discovered

Mar 6, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

A leak claim by worldleaks about this victim predates this filing by 238 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteworldleaksbd_5b4cd5dae4fc9e672025-07-11 · +238dVerified by operator

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_20a1ab387b3128692026-03-06Verified by operator
Montana State AGbd_872b6e32ae96a64b2026-03-06Verified
HHS OCRbd_b86b83b18dbf4de52024-10-18 · +504dVerified by operator

Name: Survival Flight Inc
norm: survival flight
Domain: survivalflightinc.com

Name: Survival Flight Inc
norm: survival flight
Domain: survivalflightinc.com
Industry: Healthcarellm

Discovered: Jul 17, 2025
Materiality determined: —
Notification sent: Mar 6, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Reported the incident to law enforcement
Initial access: exploit_public_facing

During the incident: Engaged third-party cybersecurity specialists to assist with securing the network environment and investigating the incident
Conducted a comprehensive review of the affected dataset to determine the scope of impacted information
Became aware of the incident and promptly began taking steps to lock down our systems
Worked with third-party forensic specialists to investigate the incident
Reported the incident to law enforcement
Implemented measures to further enhance the security of our network environment
Provided access to Single Bureau Credit Monitoring/Credit Score services at no charge
Changes made: Implemented measures to further enhance the security of our network environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

HHS OCROct 18 · first

Massachusetts State AG+504d

Montana State AG+504d

Nebraska State AG+504d · this page

Pattern: first filing Oct 18 (AZ), last Mar 6 (NE) — a 504-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/9241f4ea-c7e3-4b99-8046-7ae359809cf3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 6, 2026
Raw hash: 4d2afd94c79bc5a444bafb3256b8aebbc32d1408a9660292f442c8d3486b62e3

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entitySurvival Flight Inc

Victim entitySurvival Flight Inc

Incidentdiscovered Jul 17, 2025

Stated responseEngaged third-party cybersecurity specialists to assist with securing the network environment and investigating the incident

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov